Lucene search
HistoryJun 03, 2014 - 2:55 p.m.
CVE-2014-3942
CVSS2
6
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
AI Score
7.1
Confidence
Low
EPSS
0.003
Percentile
69.2%
The Color Picker Wizard component in TYPO3 4.5.0 before 4.5.34, 4.7.0 before 4.7.19, 6.0.0 before 6.0.14, and 6.1.0 before 6.1.9 allows remote authenticated editors to execute arbitrary PHP code via a serialized PHP object.
Affected configurations
Node
typo3typo3Match6.1
ORtypo3typo3Match6.1.1
ORtypo3typo3Match6.1.2
ORtypo3typo3Match6.1.3
ORtypo3typo3Match6.1.4
ORtypo3typo3Match6.1.5
ORtypo3typo3Match6.1.6
ORtypo3typo3Match6.1.7
ORtypo3typo3Match6.1.8
Node
typo3typo3Match4.7.0
ORtypo3typo3Match4.7.1
ORtypo3typo3Match4.7.2
ORtypo3typo3Match4.7.3
ORtypo3typo3Match4.7.4
ORtypo3typo3Match4.7.5
ORtypo3typo3Match4.7.6
ORtypo3typo3Match4.7.7
ORtypo3typo3Match4.7.8
ORtypo3typo3Match4.7.9
ORtypo3typo3Match4.7.10
ORtypo3typo3Match4.7.11
ORtypo3typo3Match4.7.12
ORtypo3typo3Match4.7.13
ORtypo3typo3Match4.7.14
ORtypo3typo3Match4.7.15
ORtypo3typo3Match4.7.16
ORtypo3typo3Match4.7.17
ORtypo3typo3Match4.7.18
Node
typo3typo3Match4.5.0
ORtypo3typo3Match4.5.1
ORtypo3typo3Match4.5.2
ORtypo3typo3Match4.5.3
ORtypo3typo3Match4.5.4
ORtypo3typo3Match4.5.5
ORtypo3typo3Match4.5.6
ORtypo3typo3Match4.5.7
ORtypo3typo3Match4.5.8
ORtypo3typo3Match4.5.9
ORtypo3typo3Match4.5.10
ORtypo3typo3Match4.5.11
ORtypo3typo3Match4.5.12
ORtypo3typo3Match4.5.13
ORtypo3typo3Match4.5.14
ORtypo3typo3Match4.5.15
ORtypo3typo3Match4.5.16
ORtypo3typo3Match4.5.17
ORtypo3typo3Match4.5.18
ORtypo3typo3Match4.5.19
ORtypo3typo3Match4.5.20
ORtypo3typo3Match4.5.21
ORtypo3typo3Match4.5.22
ORtypo3typo3Match4.5.23
ORtypo3typo3Match4.5.24
ORtypo3typo3Match4.5.25
ORtypo3typo3Match4.5.26
ORtypo3typo3Match4.5.27
ORtypo3typo3Match4.5.28
ORtypo3typo3Match4.5.29
ORtypo3typo3Match4.5.30
ORtypo3typo3Match4.5.31
ORtypo3typo3Match4.5.32
ORtypo3typo3Match4.5.33
Node
typo3typo3Match6.0
ORtypo3typo3Match6.0.1
ORtypo3typo3Match6.0.2
ORtypo3typo3Match6.0.3
ORtypo3typo3Match6.0.4
ORtypo3typo3Match6.0.5
ORtypo3typo3Match6.0.6
ORtypo3typo3Match6.0.7
ORtypo3typo3Match6.0.8
ORtypo3typo3Match6.0.9
ORtypo3typo3Match6.0.10
ORtypo3typo3Match6.0.11
ORtypo3typo3Match6.0.12
ORtypo3typo3Match6.0.13
| Vendor | Product | Version | CPE |
|---|---|---|---|
| typo3 | typo3 | 6.1 | cpe:2.3:a:typo3:typo3:6.1:*:*:*:*:*:*:* |
| typo3 | typo3 | 6.1.1 | cpe:2.3:a:typo3:typo3:6.1.1:*:*:*:*:*:*:* |
| typo3 | typo3 | 6.1.2 | cpe:2.3:a:typo3:typo3:6.1.2:*:*:*:*:*:*:* |
| typo3 | typo3 | 6.1.3 | cpe:2.3:a:typo3:typo3:6.1.3:*:*:*:*:*:*:* |
| typo3 | typo3 | 6.1.4 | cpe:2.3:a:typo3:typo3:6.1.4:*:*:*:*:*:*:* |
| typo3 | typo3 | 6.1.5 | cpe:2.3:a:typo3:typo3:6.1.5:*:*:*:*:*:*:* |
| typo3 | typo3 | 6.1.6 | cpe:2.3:a:typo3:typo3:6.1.6:*:*:*:*:*:*:* |
| typo3 | typo3 | 6.1.7 | cpe:2.3:a:typo3:typo3:6.1.7:*:*:*:*:*:*:* |
| typo3 | typo3 | 6.1.8 | cpe:2.3:a:typo3:typo3:6.1.8:*:*:*:*:*:*:* |
| typo3 | typo3 | 4.7.0 | cpe:2.3:a:typo3:typo3:4.7.0:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2014-3942
2014-06-03 14:55:10
prion
prion
Code injection
2014-06-03 14:55:00
cvelist
cvelist
CVE-2014-3942
2014-06-03 14:00:00
ubuntucve
ubuntucve
CVE-2014-3942
2014-06-03 00:00:00
openvas
openvas
TYPO3 Color Picker Wizard Remote PHP Code Execution Vulnerability
2014-07-03 00:00:00
Debian Security Advisory DSA 2942-1 (typo3-src - security update)
2014-06-01 00:00:00
Debian: Security Advisory (DSA-2942-1)
2014-05-31 00:00:00
nessus
nessus
openSUSE Security Update : typo3-cms-4_5 (openSUSE-SU-2014:0813-1)
2014-06-19 00:00:00
osv
osv
typo3-src - security update
2014-06-01 00:00:00
typo3
typo3
Multiple Vulnerabilities in TYPO3 CMS
2014-05-22 00:00:00
securityvulns
securityvulns
CVSS2
6
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
AI Score
7.1
Confidence
Low
EPSS
0.003
Percentile
69.2%
Related for NVD:CVE-2014-3942